PT-2016-6151 · Dosfstools+3 · Dosfstools+3

Hannob · Published 2016-05-18 · Updated 2020-05-30 · CVE-2016-4804

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions dosfstools versions prior to 4.0

Description The issue allows attackers to cause a denial of service (crash) via a crafted filesystem. This is achieved by triggering a heap-based buffer overflow in the read fat function or an out-of-bounds heap read in the get fat function.

Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the read boot function in boot.c until a patch is available. Avoid using crafted filesystems that could trigger the heap-based buffer overflow in the read fat function or the out-of-bounds heap read in the get fat function.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2016-1601

CVE-2016-4804

DLA-2224-1

DLA-474-1

MGASA-2016-0184

SUSE-SU-2016:2145-1

SUSE-SU-2016:2146-1

USN-2986-1

Affected Products

Alt Linux

Suse

Ubuntu

Dosfstools

References · 33

• https://github.com/dosfstools/dosfstools/issues/26 · Vendor Advisory
• https://github.com/dosfstools/dosfstools/issues/25 · Vendor Advisory
• https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html · Patch
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00014.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-2986-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0184 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-4804 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4804 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2986-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0184.html · Security Note
• http://lists.opensuse.org/opensuse-updates/2016-06/msg00001.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-4804 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4804 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8872 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-4804 · Security Note